iceweasel-hardened-pref improvements

2 files changed, 12 insertions, 4 deletions

diff --git a/nonprism/iceweasel-hardened-preferences/PKGBUILD b/nonprism/iceweasel-hardened-preferences/PKGBUILD
index 61487e747..55a137cc4 100644
--- a/nonprism/iceweasel-hardened-preferences/PKGBUILD
+++ b/nonprism/iceweasel-hardened-preferences/PKGBUILD
@@ -2,7 +2,7 @@
 # Contributor: André Silva <emulatorman@parabola.nu>
 
 pkgname=iceweasel-hardened-preferences
-pkgver=0.6
+pkgver=0.7
 pkgrel=1
 pkgdesc="Hardened preferences script which runs Iceweasel to protect from a variety of privacy, security, and fingerprinting attacks."
 arch=(any)
@@ -11,6 +11,7 @@ replaces=('iceweasel-hardened')
 conflicts=('iceweasel-hardened')
 depends=('firejail')
 optdepends=('iceweasel-noscript: XSS and Javascript Protection (Important)'
+'iceweasel-no-resource-uri-leak: Deny resource:// access to Web content (Important)'
 'iceweasel-ublock-origin: Block ads and trackers')
 url="https://wiki.parabola.nu/${pkgname%%-*}"
 install=iceweasel-hardened.install
@@ -20,11 +21,11 @@ source=('firefox-branding.js'
 'iceweasel-hardened.install')
 sha512sums=('cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e'
             'd542452fa1d619d22e9c9b6e4af58d7310abdc5c81d871a1abbddb0087c53913c8a244af2b7be416a2c439383afc2480c439078ebde0ccac518300d9027b4800'
-            'f6ea9ff386371ea24617eea0f6addab8f31b4bffc08a36329f0c50c291b3ba8b220b1ca7ad2d187f7f6270b4a4e541296779276769134915cf8f096fa2d60cf5'
+            '5ab3f4ec5e7a8e9475a50553a126074287cc6429ecf415905fdcbbce4ce884dd50598ebc9843e856de73252bc9c8679bcff8e36ec989cdd153357587de300682'
             'e9baa13d50195ff5be507093c45c00bb06a77c9e633ac183ec2fd74eebb11bfc07bde334fe4455b763e8700cde146ae223578ebd8d13066739220502b6eebff6')
 whirlpoolsums=('19fa61d75522a4669b44e39c1d2e1726c530232130d407f89afee0964997f7a73e83be698b288febcf88e3e03c4f0757ea8964e59b63d93708b138cc42a66eb3'
                'f7cb38e58f644ddeae9f931c290ae1d96e54d0a8937171f2ebad498b65b87f2115cbd0a0f2a55e12dceba7a387e70fd2432678010a87975f8322c9c27b41efd2'
-               '968c14842d6ff14522f322b493b28af84c04901ceb3a2543fe1e485a6c301e90ff3df48b7ecdf79fcdf0afb8288e1056931218d948fc271aa52b7bf80dcd1203'
+               '27234c2cd31c6305d83cfa013212738122bc0e2a1b0f02afbfa1a8dda4a26b93c47aed4472227c0db6167d0219089274c7b51692df341915df0ba95962ce01f9'
                '44b57bbbf8f00ffee11afc84f5ea3daedc39e59da3ee91e337c1eaad24c014caf5680eb250e25a3e046db9caaf6829c3b667693de9f040d8864be34b96300bb9')
 
 package() {
diff --git a/nonprism/iceweasel-hardened-preferences/iceweasel-branding.js b/nonprism/iceweasel-hardened-preferences/iceweasel-branding.js
index 91b8fde42..776649aa1 100644
--- a/nonprism/iceweasel-hardened-preferences/iceweasel-branding.js
+++ b/nonprism/iceweasel-hardened-preferences/iceweasel-branding.js
@@ -26,6 +26,11 @@ pref("browser.chrome.favicons", false);
 pref("browser.chrome.site_icons", false);
 pref("browser.shell.shortcutFavicons", false);
 
+// We want to use en-US everywhere.
+pref("extesnsions.webservice.discoverURL",  "https://discovery.addons.mozilla.org/en-US/firefox/discovery/pane/%VERSION%/Windows/%COMPATIBILITY_MODE%");
+pref("extensions.getAddons.search.url",  "https://services.addons.mozilla.org/en-US/firefox/api/%API_VERSION%/search/%TERMS%/all/%MAX_RESULTS%/Windows/%VERSION%/%COMPATIBILITY_MODE%?src=firefox");
+pref("extensions.webservice.discoverURL", "https://discovery.addons.mozilla.org/en-US/firefox/discovery/pane/%VERSION%/Windows/%COMPATIBILITY_MODE%");
+
 /******************************************************************************
  * HTML5 / APIs / DOM                                                         *
  *                                                                            *
@@ -712,7 +717,9 @@ pref("browser.snippets.updateUrl",			"about:blank");
 // Disable WAN IP leaks
 pref("captivedetect.canonicalURL", "about:blank");
 pref("network.captive-portal-service.enabled", false);
-pref("noscript.ABE.wanIpAsLocal", false); // NoScript ignores this preference?
+// Note: NoScript seems to ignore these and leak WAN anyway.
+pref("noscript.ABE.wanIpAsLocal", false);
+pref("noscript.ABE.wanIpCheckURL", "about:blank");
 
 // Disable Default Protocol Handlers, always warn user instead
 pref("network.protocol-handler.external-default", false);